AT&T data breach settlement claim

Imagine logging into your account and seeing an additional deposit. That will be possible for millions of AT&T clients in the next few months. However, here’s the twist: most people eligible for compensation from the $177 million AT&T data breach class action settlement will end up receiving nothing.

About 73 million current and former AT&T users had their personal information leaked in a couple of significant 2024 data breaches at AT&T. Nevertheless, as of late December 2025, merely 4.38 million claims have been filed, which represents a mere 4.8% claims rate.

Are you one of those millions of people who received an email notification or heard about this settlement on the news? You must be asking yourself, am I eligible? What’s my share going to be? Is there still time to file a claim? And frankly speaking, does it even make sense?

Here’s all the info you need in one go.

What Actually Happened? The Two AT&T Data Breaches

Before delving into the money issue, it is important to know the basics. This particular settlement applies to two distinct security breaches announced by AT&T in 2024. It is important to know which breach you are referring to since there are different compensation policies for both.

The March 2024 Breach (The Dark Web Leak)

On March 30, 2024, AT&T revealed that a database compromising user data had been made available on the dark web. The data were not newly stolen; rather, they dated back to as far as 2019 or before.

Compromised data: Names, physical mailing addresses, phone numbers, email addresses, dates of birth, password information, billing account numbers, and most importantly, Social Security numbers of many of those affected.

Number of people: Approximately 73 million users.

The July 2024 Breach (The Cloud Download)

On July 12, 2024, AT&T reported a different breach that involves hacking and downloading customer call and message histories from a third-party cloud service offered by Snowflake Inc.

Information stolen: Customer phone numbers, the other phone numbers that the customers contacted, the number of calls made to these phone numbers, the total duration of these calls, and, for some, cellular site ID numbers. Text messages were not included; however, call patterns could be sensitive data.

Affecting how many individuals: Almost all of AT&T cellular customers in specific time periods.

Overlap

There are customers who have been affected by both of the incidents. Should this be your case, then you belong to a specific class, and you can receive compensation from both settlements up to the maximum limit.

The Settlement: Breaking Down the $177 Million

However, AT&T decided to accept the proposed settlement in order to save money and time from going through prolonged legal proceedings. They deny having done anything wrong but still accepted the settlement because that is the nature of class actions.

The settlement amounts to $177 million, distributed as follows:

  • $149 million compensation for the March 2024 (dark web) breach
  • $28 million compensation for the July 2024 (cloud download) breach

Preliminary approval of the settlement has been granted, and the hearing for its final approval took place on January 15, 2026. The court is still considering granting the final approval, and even in that case, the process may be delayed due to appeal.

Who Is Eligible for Payment?

You qualify if you’re a “living person in the United States” whose data was involved in either breach.

For the March 2024 Breach (AT&T 1 Settlement Class)

If your data elements have been involved in the Dark Web data set, you are covered under these services, including some combination of the following:

  • Names
  • Addresses
  • Telephone numbers
  • Email addresses
  • Dates of birth
  • Account passcodes
  • Billing account numbers
  • Social Security numbers

For the July 2024 Breach (AT&T 2 Settlement Class)

You are included if you were an AT&T account holder, line holder, or end user whose information was part of the cloud download. This includes:

  • Your telephone number
  • Numbers you interacted with
  • Interaction counts
  • Aggregate call durations

If you’re enrolled in both classes, you can file for both.

In case of doubt: You can assess your eligibility by visiting the official website for the settlement or reaching out to Kroll Settlement Administration via 833-890-4930.

How Much Money Could You Get?

The amount depends on which breach affected you and whether you can document financial losses.

For the March 2024 Breach: Up to $5,000

There are three ways to claim:

  • Documented Loss Cash Payment ($5,000 max): Provided you can show documentation proving “fairly traceable” monetary losses due to the breach (such as fraudulent charges, credit monitoring, and identity theft expenses), you will be eligible to receive a cash payment of up to $5,000.
  • Tier 1 Cash Payment: You qualify for a Tier 1 cash payment of five times the Tier 2 cash payment if you have an exposed SSN.
  • Tier 2 Cash Payment: You qualify for a Tier 2 cash payment if your personal information is breached but your SSN is not.

The exact dollar amount to be paid under Tier 1 and Tier 2 is not fixed; rather, they are “pro-rata” percentages of the money left after deducting administration and legal costs.

For the July 2024 Breach: Up to $2,500

The same “documented loss” provision exists: $2,500 if evidence of traceable loss can be shown. In the absence of evidence, one may apply for the Tier 3 Cash Payment portion of the remaining monies.

If You Were in Both Breaches: Up to $7,500 Total

You can obtain payouts from both the settlement funds, thus making it $7,500 in total. A very important point here is that very few people will be able to receive their pay-out in full. There will be so many claimants that most likely the amount received will not be more than a few hundred dollars.

How to File a Claim (Step-by-Step)

The deadline was December 18, 2025, but the online claims submission process has now been completed. Although mail-in claims submitted late will possibly be accepted, it cannot be guaranteed.

In case you are reading this after the deadline but still want to try:

  1. Obtain the Late Claim Form from the settlement website under the Documents tab.
  2. Print out the form; this must be a physical form filled out and not an online one.
  3. Send it to:
mail
AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324

Please send it right away. Those who submit their filing late should mail it right away, as there is no guarantee that it will be processed.

For assistance, call 833-890-4930.

What to Expect: Payment Timeline

The time table is still unknown:

  • Hearing on approval: January 15th, 2026
  • Decision from court: Still pending as of February 2026
  • Appeals: May result in further delays
  • Distributing payments: Will occur following court approval, appeal resolution, and reviewing all claims

Optimistic scenario: Payments may be made within 90-150 days after final approval. Payments can be made in Spring 2026 without any appeals.

The Bigger Picture: What This Means for You

Apart from the financial aspect, there is another message here that pertains to the reality of the digital world: your personal information has value, and when companies use it improperly, the consequences can be severe.

The claims recovery rates in data breach settlements tend to be rather low at roughly 4.8% in this particular case. Thus, millions of dollars go unclaimed every year due to the fact that consumers do not know about the settlement, do not believe the process to be easy enough, or think that the compensation will not be worthwhile.

If you are eligible, making the claim will be quick and painless. All it takes is a few minutes (or a few stamps, if you are late). Even if your reward in the end will not be substantial, it will still be compensation for a breach that is not your fault.

Bottom line: If you are eligible, it is worth making the claim. The process is quick and simple.

Resources and Next Steps

AT&T Data Incident Settlement
c/o Kroll Settlement Administration LLC
P.O. Box 5324
New York, NY 10150-5324

Conclusion

This is a real chance to get some compensation out of what seems like a hopeless situation. The compensation amounts that you’ll receive won’t change your life forever but are still worth getting if you qualify.

Important things to know about it:

  1. Eligibility will depend on whether your data was part of the breaches in March and July 2024.
  2. Compensation amount cap: $5,000 for the March breach, $2,500 for July, $7,500 if in both.
  3. Late applications will also be accepted by mail, although acceptance is not guaranteed.
  4. The distribution will take place only after the approval and possible appeals, which means that it will happen in 2026 at the earliest.

If you have an opportunity to get some compensation, you don’t have much time left. Use it.

Explore Our Cybersecurity Category. And if you are reading it up to here, leave a sweet comment to motivate us to write blog everyday.

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top